Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-63806KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()
- CVE-2026-63805crypto: nx - fix nx_crypto_ctx_exit argument
- CVE-2026-63804gfs2: fix use-after-free in gfs2_qd_dealloc
- CVE-2026-63803hdlc_ppp: sync per-proto timers before freeing hdlc state
- CVE-2026-63802blk-cgroup: fix UAF in __blkcg_rstat_flush()
- CVE-2026-63801tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
- CVE-2026-63800pNFS: Fix use-after-free in pnfs_update_layout()
- CVE-2026-63799sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in fixup path
- CVE-2026-63798irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove
- CVE-2026-63797rpmsg: char: Fix use-after-free on probe error path
- CVE-2026-63796ocfs2: reject oversized group bitmap descriptors
- CVE-2026-637959p: avoid putting oldfid in p9_client_walk() error path
- CVE-2026-63794KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
- CVE-2026-63793ntfs: serialize volume label accesses
- CVE-2026-53403fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var
- CVE-2026-53402fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
- CVE-2026-53401fbdev: omap2: fix use-after-free in omapfb_mmap
- CVE-2026-53400i2c: core: fix adapter registration race
- CVE-2026-53399nfsd: release layout stid on setlease failure
- CVE-2026-53398NFSD: Fix SECINFO_NO_NAME decode error cleanup
- CVE-2026-53397nfsd: fix posix_acl leak on SETACL decode failure
- CVE-2026-53396nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
- CVE-2026-53395nfsd: fix dead ACL conflict guard in nfsd4_create
- CVE-2026-53394nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race
- CVE-2026-53393nfsd: reset write verifier on deferred writeback errors
- CVE-2026-53392NFSv4/flexfiles: reject zero filehandle version count
- CVE-2026-53391NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
- CVE-2026-53390ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
- CVE-2026-53389net/tcp-ao: fix use-after-free of key in del_async path
- CVE-2026-53388fuse: re-lock request before replacing page cache folio